Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/_edsqF6WVBpa3Tysrx5eEU-qR-8.mft
File: _edsqF6WVBpa3Tysrx5eEU-qR-8.mft (raw, json)
Hash identifier: T12zHRkFqGHQn/emXGdqvRf8u/ziQOSXBK/8k8jMK24=
Subject key identifier: F1:69:0A:D5:25:A9:E2:91:27:9B:CC:CC:73:92:FD:F1:C2:34:AC:F2
Authority key identifier: FD:E7:6C:A8:5E:96:54:1A:5A:DD:3C:AC:AF:1E:5E:11:4F:AA:47:EF
Certificate issuer: /CN=fde76ca85e96541a5add3cacaf1e5e114faa47ef
Certificate serial: 019D973C9DC798C6797F23500FF4A56BA7A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_edsqF6WVBpa3Tysrx5eEU-qR-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/_edsqF6WVBpa3Tysrx5eEU-qR-8.mft
Manifest number: 09F7
Signing time: Thu 16 Apr 2026 17:00:25 +0000
Manifest this update: Thu 16 Apr 2026 17:00:25 +0000
Manifest next update: Fri 17 Apr 2026 17:00:25 +0000
Files and hashes: 1: _edsqF6WVBpa3Tysrx5eEU-qR-8.crl (hash: x0Mo1N3j/XrjnwbAApChz7g9Gwv8W9xlwSNH3Grc11I=)
2: anzEyjHaXQLmItjwy5G_m7H0DIM.roa (hash: zkC5URyiIIzrvJgxvh+5tV7gFXiK26Z7Y7U8Tu17QQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/_edsqF6WVBpa3Tysrx5eEU-qR-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/_edsqF6WVBpa3Tysrx5eEU-qR-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_edsqF6WVBpa3Tysrx5eEU-qR-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:3c:9d:c7:98:c6:79:7f:23:50:0f:f4:a5:6b:a7:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fde76ca85e96541a5add3cacaf1e5e114faa47ef
Validity
Not Before: Apr 16 17:00:25 2026 GMT
Not After : Apr 17 17:00:25 2026 GMT
Subject: CN=f1690ad525a9e291279bcccc7392fdf1c234acf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:23:b3:72:25:49:44:b6:9b:7c:39:a4:7b:4a:
36:27:91:35:dc:83:81:09:d8:bd:dd:42:1f:46:ee:
3e:15:95:c2:44:7d:ea:cc:2a:53:b2:21:44:45:38:
d2:c4:df:5f:13:f0:e5:09:5e:c0:4a:31:8f:ab:63:
9e:97:33:fd:52:b7:e1:5e:9f:09:c0:2b:4d:70:68:
f0:21:5e:ce:80:f4:87:05:03:e2:8d:68:2d:68:70:
cb:52:67:5c:c5:bf:bc:19:82:b4:12:c9:27:da:3c:
9d:08:7c:fa:35:6f:24:ea:13:61:6d:1e:1f:c5:a5:
56:d1:4c:1a:8a:59:4d:b4:e2:35:d9:08:f1:5a:c4:
11:b5:5c:33:49:b1:e6:ba:27:56:b3:d5:bf:6f:1b:
72:2b:9a:50:a0:1f:39:c6:41:d8:ac:67:43:8e:11:
f3:55:80:b8:3c:97:aa:54:fa:ac:1a:cb:1d:93:14:
9a:f7:1f:5c:06:37:24:12:56:8d:56:46:ac:fb:ee:
18:c1:50:33:37:81:90:ae:43:39:65:58:ea:35:cd:
aa:60:d1:2e:33:1b:7f:1f:ac:22:41:e4:b5:25:86:
64:ed:d8:2a:47:bf:8c:6a:96:45:6a:f6:0d:00:c0:
30:55:6d:13:08:fa:d9:7a:47:02:39:4f:1a:42:2e:
f2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:69:0A:D5:25:A9:E2:91:27:9B:CC:CC:73:92:FD:F1:C2:34:AC:F2
X509v3 Authority Key Identifier:
keyid:FD:E7:6C:A8:5E:96:54:1A:5A:DD:3C:AC:AF:1E:5E:11:4F:AA:47:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_edsqF6WVBpa3Tysrx5eEU-qR-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/_edsqF6WVBpa3Tysrx5eEU-qR-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/_edsqF6WVBpa3Tysrx5eEU-qR-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:45:4d:0d:3a:13:69:31:60:3c:8f:0a:e3:90:b4:d5:42:63:
3f:c9:11:6d:cd:8a:73:ef:18:fc:19:31:a2:99:92:d6:f7:2d:
4c:4d:ab:3f:17:ef:36:c8:3c:f1:6a:f7:16:6b:c8:87:10:fc:
6e:1d:b4:3f:78:a9:25:be:f1:3b:71:9b:0c:19:78:a5:1e:28:
b7:a0:23:3b:62:d2:10:54:29:8b:06:ff:f6:43:87:6e:96:f9:
a1:2c:95:db:80:c7:c4:96:63:64:15:85:4b:ee:47:b0:8c:f3:
5c:66:4f:50:01:7c:ae:42:d2:87:26:d1:1a:c9:4f:09:80:12:
01:5f:47:55:a4:99:3f:c1:be:b1:ee:0b:72:74:a4:0b:74:e7:
ce:24:20:f1:c8:c9:f0:f4:00:a8:d5:3f:f8:35:c3:db:17:38:
e1:3c:3a:60:ff:63:49:35:6c:7f:60:c8:c4:8c:70:ec:32:21:
56:ea:86:74:c1:65:60:40:e6:f2:6c:a9:c7:a3:a6:8e:62:a9:
1e:81:e3:8e:53:12:89:fd:82:89:8b:77:5b:d6:5f:be:c0:62:
e6:92:81:b4:91:ec:28:8e:01:45:ae:55:9f:e3:78:64:e5:80:
fc:0a:e4:f9:34:a3:54:05:f7:85:46:55:94:11:66:72:53:23:
69:89:b8:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:10:29 2026 by rpki-client